Correctly verify that the reply to a secrets request is actually coming
from a verified device. While we did verify that it was us who replied,
we didn't properly cancel storing the secret if the sending device was
one of ours but was maliciously inserted by the homeserver and
unverified. We only send secret requests to verified devices in the
first place, so only the homeserver could abuse this issue.

Additionally we protected against malicious secret poisoning by
verifying that the secret is actually the reply to a request. This means
the server only has 2 places where it can poison the secrets:

- After a verification when we automatically request the secrets
- When the user manually hits the request button

It also needs to prevent other secret answers to reach the client first
since we ignore all replies after that one.

The impact of this might be quite severe. It could allow the server to
replace the cross-signing keys silently and while we might not trust
that key, we possibly could trust it in the future if we rely on the
stored secret. Similarly this could potentially be abused to make the
client trust a malicious online key backup.

If your deployment is not patched yet and you don't control your
homeserver, you can protect against this by simply not doing any
verifications of your own devices and not pressing the request button in
the settings menu.

Currently translated at 100.0% (830 of 830 strings)

Co-authored-by: Linerly <linerly@protonmail.com>
Translate-URL: https://weblate.nheko.im/projects/nheko/nheko-master/id/
Translation: Nheko/nheko

Currently translated at 100.0% (830 of 830 strings)

Co-authored-by: Przemysław Romanik <github@rom4nik.pl>
Translate-URL: https://weblate.nheko.im/projects/nheko/nheko-master/pl/
Translation: Nheko/nheko

Currently translated at 100.0% (830 of 830 strings)

Co-authored-by: Jaron Viëtor <jaron@v8or.nl>
Translate-URL: https://weblate.nheko.im/projects/nheko/nheko-master/nl/
Translation: Nheko/nheko

Currently translated at 100.0% (830 of 830 strings)

Co-authored-by: Lurkki14 <jussi.kuokkanen@protonmail.com>
Translate-URL: https://weblate.nheko.im/projects/nheko/nheko-master/fi/
Translation: Nheko/nheko

Currently translated at 100.0% (807 of 807 strings)

Co-authored-by: Przemysław Romanik <github@rom4nik.pl>
Translate-URL: https://weblate.nheko.im/projects/nheko/nheko-master/pl/
Translation: Nheko/nheko

fixes #1180

relates to #1168

fixes #1172

Restore compatibility with clang-format v11

This reverts commit e6b6a764,
because it broke compatibility with clang-format 11 (which is current
on some linux distros) and because it didn't achieve its original
goal. See PR #1166 for discussion.

Fix the position of version

Added discrete edit button to room profiles.

Focus message input box when pressing Esc

Reactions: avoid highlight color misuse, subdue bright border color